System Overview
Complete system architecture and core concepts
What is This System?
An enterprise-grade RBAC (Role-Based Access Control) system for managing incident response teams within a hierarchical installation topology. Allows administrators to:
• Create and manage incident response teams with on-call roles
• Assign teams to nodes in an organizational hierarchy
• Validate permissions in real-time using role-based scopes
• Enforce RBAC guardrails to prevent unauthorized assignmentsKey Components
• **Users**: Directory of team members with optional global admin flag • **UserScopes**: Define read boundaries and RBAC permissions per user • **IncidentTeams**: Containers for on-call responders • **InstallationNodes**: 4-tier hierarchy (Account → SubAccount → Zone → Installation) • **On-Call Roles**: Primary, Secondary, Observer (per team member)
3 Main Workflows
1. **Create Team** - Provision teams with members and assign scopes 2. **Assign Teams** - Map teams to hierarchy nodes with permission validation 3. **Manage Teams** - View, edit, and delete teams